10:02 p.m.
I have a small home oVirt 4.5 deployment that was struggling a bit and I think I've
only made things worse. I was seeing some SSL errors in various places but couldn't
find any evidence of an expired cert though maybe I overlooked something. At present, it
looks like the most immediate problem is that the engine.log is showing
SyncNetworkProviderCommand fails saying EngineException: (Failed with error Unsupported or
unrecognized SSL message and code 5050). For now, I'm only concerning myself to one
Host that had been running VMs until I tried restarting everything from a power off. I
take it that the sync failure prevents this Host from becoming active.
I had successfully been using this setup for many years. I do have my own web cert on the
engine signed by my CA. While I was getting this same "code 5050" error before
with things like ovirt-imageio (what prompted my initial digging), now I'm afraid
I've only made things more complex. See, I was running FreeIPA on a pair of VMs. In
the past, this pair of VMs would auto-start once the oVirt Engine and Hosts were going and
I had no issue. But now I wonder to what extent OSCP being unreachable might affect the
SSL errors.
What's the best/easiest/safest way out of this mess? Should I just wipe ovirt-engine
of all the non-rpm provided files in /etc/pki/ovirt-engine/ and redo the engine-setup?
I'm afraid of making things worse before I begin attempting that.
8:03 p.m.
Hi,
It's always easy to wipe and start fresh but windows style of administration has a
huge drawback - you don't know why and what happened to cause it.I have learned a lot
while trying to recover from various problems and I would recommend you to at least give
it a try.You have a symptom and a hypothesis. Regenerate the engine's and all hosts
certificates and see how it will affect your setup.
Best Regards,Strahil Nikolov
On Fri, Feb 2, 2024 at 18:57, John Florian<trailtotale(a)gmail.com> wrote: I have
a small home oVirt 4.5 deployment that was struggling a bit and I think I've only made
things worse. I was seeing some SSL errors in various places but couldn't find any
evidence of an expired cert though maybe I overlooked something. At present, it looks
like the most immediate problem is that the engine.log is showing
SyncNetworkProviderCommand fails saying EngineException: (Failed with error Unsupported or
unrecognized SSL message and code 5050). For now, I'm only concerning myself to one
Host that had been running VMs until I tried restarting everything from a power off. I
take it that the sync failure prevents this Host from becoming active.
I had successfully been using this setup for many years. I do have my own web cert on the
engine signed by my CA. While I was getting this same "code 5050" error before
with things like ovirt-imageio (what prompted my initial digging), now I'm afraid
I've only made things more complex. See, I was running FreeIPA on a pair of VMs. In
the past, this pair of VMs would auto-start once the oVirt Engine and Hosts were going and
I had no issue. But now I wonder to what extent OSCP being unreachable might affect the
SSL errors.
What's the best/easiest/safest way out of this mess? Should I just wipe ovirt-engine
of all the non-rpm provided files in /etc/pki/ovirt-engine/ and redo the engine-setup?
I'm afraid of making things worse before I begin attempting that.
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WLRBA2EXHCC...
293
days inactive
295
days old
1 comments
2 participants
participants (2)
-
John Florian -
Strahil Nikolov